Prompt

We think this document is hiding something. Can you find what is hidden?

Walk-Through

This challenge provides you with a .docx file which is a Microsoft Word document and requires you to extract hidden information from the file.

Once you download the file and try to open it (using a program compatible with Microsoft Word files), you’ll see that the document has 4 unimportant images (4 images on 2 pages) with no sensitive information inside it. It can be assumed that this is not the hidden information.

There are multiple paths to take to get more information about this file. There could be files hidden inside of this file somehow. Use binwalk to get some information about what could be in the file. binwalk SuperAwesomeDoc.docx

It’s safe to assume this is actually more than a Word document. Another path to determine the file type is by using a hex editor. The first four bytes (50 4B 03 04) are the magic bytes for a ZIP compressed archive.

The Microsoft Word document, or .docx extension file is actually a ZIP compressed archive! It is possible to decompress the archive and extract its contents (you can see the same file names in the binwalk screenshot). unzip SuperAwesomeDoc.docx

Notice that there is a directory named word that contains a number of files. It looks like it contains all the relevant files for the Word document. Navigate into the word directory and inspect the various files and directories. There are 5 images stored in the media directory (the Word document only had 4 images when you opened it earlier), so one of these 5 images is likely the hidden information.

Questions

1. What is the name of the hidden file containing the flag?

Inspect the contents of the decompressed archive to find a PNG image file

2. What is the flag?

Open the image file to find the flag

©️ 2025 Cyber Skyline. All Rights Reserved. Unauthorized reproduction or distribution of this copyrighted work is illegal.